Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e203537303433.roa
File: 34352e39352e36372e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: JQp7fCgf86WCFsY4zwDDgVpHxOPoDXYEd3GZlKxekKY=
Subject key identifier: ED:30:E3:15:FE:A2:64:71:57:A8:9C:ED:96:91:50:74:74:69:62:DE
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 19B392D4FA70A102661AEFAF023AFFF1B69CB186
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e203537303433.roa
Signing time: Mon 11 Sep 2023 15:13:32 +0000
ROA not before: Mon 11 Sep 2023 15:08:32 +0000
ROA not after: Mon 09 Sep 2024 15:13:32 +0000
asID: 57043
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b3:92:d4:fa:70:a1:02:66:1a:ef:af:02:3a:ff:f1:b6:9c:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 11 15:08:32 2023 GMT
Not After : Sep 9 15:13:32 2024 GMT
Subject: CN=ED30E315FEA2647157A89CED96915074746962DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:d8:3b:a5:b4:0c:7a:8d:67:6f:cf:c7:b7:
f1:7a:5d:c4:0c:0a:56:11:34:de:28:35:63:ca:8b:
5f:ed:22:06:71:96:58:d9:05:39:96:e1:3a:2a:f9:
c6:4e:ec:f6:af:34:dc:bd:64:61:52:2b:19:f9:4c:
70:5c:d6:75:46:0f:11:98:14:e2:c5:98:8e:24:61:
4d:85:08:53:de:df:0f:c4:3d:4e:bc:16:4b:df:8d:
11:28:02:64:9a:a9:bd:48:5a:c9:66:17:68:87:00:
62:33:ff:c2:58:38:77:bd:19:04:0a:b1:c4:7b:2e:
45:35:77:47:fd:00:6b:0e:18:3f:49:64:84:be:4b:
c3:b2:cb:ca:b1:2b:e6:e5:da:14:db:d9:87:87:d1:
4d:67:02:5e:ef:3b:19:57:01:50:39:5a:66:14:0d:
b2:82:ea:7a:f7:2b:a5:88:64:ad:11:7c:c7:28:ac:
74:85:be:f9:b4:51:cf:b9:30:0d:1d:a8:fe:d3:e1:
c8:4c:52:4f:b2:80:8a:ca:82:03:1b:c0:1d:82:00:
fe:d8:d4:9a:74:a3:71:45:50:cc:c8:27:dc:19:65:
aa:d5:c9:28:f6:73:58:b6:92:5d:f4:25:48:8b:90:
0d:8d:97:bd:2a:a8:63:a5:b3:7a:92:1e:4c:5c:0e:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:30:E3:15:FE:A2:64:71:57:A8:9C:ED:96:91:50:74:74:69:62:DE
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cf:5d:a7:2e:2b:b2:9f:cd:3b:f8:2f:a3:13:0b:3c:6d:d9:
0c:e6:08:c2:9f:a5:8d:7f:af:37:92:89:bd:c2:49:0a:bb:ee:
fc:20:f3:a4:a7:97:85:95:91:e4:4f:ba:ea:a0:7a:0c:95:fe:
b9:45:fb:ea:31:9c:1d:a7:82:d8:e4:d0:7d:e3:60:e5:57:1a:
1e:84:a0:d3:ad:28:a5:18:16:28:c4:b2:f0:0d:42:3d:e9:4c:
ca:0d:43:ce:49:69:2f:7e:36:21:14:10:64:c5:1f:2f:8e:58:
0d:50:50:84:f8:9b:1f:56:36:0e:28:e6:f0:bb:e9:c1:ef:28:
5c:1a:7a:6b:74:74:4f:ed:78:54:39:99:1c:b1:72:e4:16:f9:
81:67:17:eb:fe:b2:8a:85:60:03:f1:27:7c:cb:e5:a6:00:6c:
e3:ea:39:0f:fb:2e:69:06:ba:0d:25:f9:b2:dd:e8:0d:a5:39:
13:1b:6d:db:49:08:7a:7b:7b:3d:20:b2:23:db:9f:38:66:21:
33:2b:be:ce:83:8b:d9:74:41:a6:ea:03:6e:3b:ca:4d:d2:1d:
7d:67:55:15:f6:5f:f9:7a:ea:a2:3b:0e:dc:93:f4:47:af:49:
e3:48:ee:59:5b:d2:85:54:81:74:6c:2f:ef:ce:0b:59:16:8c:
64:8f:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:29:13 2023 by rpki-client on console-fra.rpki-client.org